CWE-787: Out-of-bounds Write vulnerabilities

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. Exploitation requires user interaction. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a malicious file. Exploitation requires user interaction. The vulnerability is rated high severity with a CVSS score of 7.8.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a malicious file. This vulnerability requires user interaction for exploitation. It has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity score of 7.8. No affected versions or patch information are currently provided.

Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects the context of the current user. The vulnerability has a high severity rating with a CVSS score of 7.8.

OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 contain a heap-based buffer overflow vulnerability triggered when exrmetrics processes crafted deep scanline EXR files with specific pixel conversion options. This vulnerability is fixed in versions 3.3.13 and 3.4.14.

A heap-based buffer overflow vulnerability exists in AcademySoftwareFoundation's openexr library in certain versions when processing crafted tiled EXR files on 32-bit/ILP32 builds. The issue arises due to an integer overflow in buffer size calculation, leading to out-of-bounds writes during tile decoding. This vulnerability is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

CVE-2026-64204 is a high-severity memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. It affects NI LabVIEW 2026 Q3 (26.3.0) and earlier versions, including specific versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. The vulnerability is classified as CWE-787 (Out-of-bounds write). No official patch or remediation guidance is currently available.

A use-after-free vulnerability exists in AcademySoftwareFoundation's openexr library in versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13. This flaw allows a crafted EXR image with a nonzero dataWindow.min to cause TypedFlatImageChannel::row() to return an invalid heap pointer, leading to out-of-bounds or use-after-free writes when applications write rows via FlatHalfChannel::row(). The issue affects tools and services processing untrusted EXR files. Fixed in versions 3.2.11, 3.3.13, and 3.4.14.

CVE-2026-16233 is a high-severity memory corruption vulnerability in NI LabVIEW that can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file. The vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions, including specific versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. No official patch or remediation guidance is currently available.

NVIDIA DGX Spark system firmware contains an out-of-bounds write vulnerability (CWE-787) that can be exploited by a privileged attacker. Successful exploitation may result in code execution, privilege escalation, denial of service, information disclosure, and data tampering. The vulnerability has a high CVSS score of 8.2, indicating significant impact potential. No specific affected versions or patches have been disclosed yet.

NVIDIA DGX Spark system firmware contains a high-severity out-of-bounds write vulnerability (CWE-787) that could be exploited by a privileged attacker. Successful exploitation may result in code execution, privilege escalation, denial of service, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant impact. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.

A vulnerability in 389-ds-base allows a remote, authenticated attacker to exploit the SASL UNBIND process to cause a connection stall, leading to resource exhaustion and denial of service. The flaw is identified as CVE-2026-78701 and has a CVSS score of 6.5 (medium severity). Multiple specific affected versions are listed, and a Red Hat advisory confirms the availability of a security update addressing this and related issues.

OpenEXR versions prior to 3.2.10, 3.3.12, and 3.4.13 contain a heap out-of-bounds write vulnerability in the SampleCountChannel::set function. The flaw arises from incorrect computation of the Y coordinate using dataWindow.min.x instead of dataWindow.min.y, which can cause writes before the allocated buffer. This vulnerability can lead to heap corruption and process crashes when using the DeepImage API. The issue has been fixed in versions 3.2.10, 3.3.12, and 3.4.13.

OpenEXR versions 3.4.0 through 3.4.13 contain an out-of-bounds write vulnerability in the HTJ2K-compressed EXR decoding path. This occurs when a crafted EXR file has JPEG 2000 SIZ fields that place the first tile outside the visible image, leading to invalid tile and codeblock geometry in the OpenJPH AVX2 decoder. The flaw can cause a denial of service by crashing the application. The issue is fixed in version 3.4.14.

CVE-2026-7455 is an out-of-bounds write vulnerability in Autodesk 3ds Max triggered by parsing a maliciously crafted FLT file. Exploitation can lead to application crashes, data corruption, or arbitrary code execution within the context of the current process. The vulnerability affects specific versions 2026.0.0 and 2027.0.0 of 3ds Max. The CVSS score is 7.8, indicating high severity. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-16783 is an out-of-bounds write vulnerability in Autodesk 3ds Max triggered by parsing a maliciously crafted ABC file. Exploitation may lead to application crashes, data corruption, or arbitrary code execution within the context of the current process. The vulnerability affects specific versions 2026.0.0 and 2027.0.0 of 3ds Max. The CVSS 3.1 base score is 7.8, indicating high severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-78183 is a critical heap out-of-bounds write vulnerability in DBD::Pg version 3.21.0 for Perl. The flaw occurs in the quote_float function, which incorrectly allocates memory for certain special numeric literals such as NaN, Inf, and Infinity, causing a buffer overflow by 2 bytes. This issue was introduced in version 3.21.0 due to a rewrite of quote.c. The vulnerability can be triggered via the $dbh->quote method with specific inputs.